Poppler before 0.70.0 has a NULL pointer dereference in _poppler_attachment_new when called from poppler_annot_file_attachment_get_attachment.
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade poppler-qtUpgrade poppler-cppUpgrade poppler-glibUpgrade poppler-utilsUpgrade poppler-cpp-develUpgrade poppler-glib-develUpgrade popplerUpgrade poppler-debuginfoUpgrade poppler-demosUpgrade poppler-develUpgrade poppler-qt-devel | Apr 27, 2020 | Nov 10, 2018 |
| Amazon_linux | — | Upgrade poppler | Aug 28, 2019 | Nov 10, 2018 |
| Centos_linux | — | Upgrade evince-develUpgrade evince-dviUpgrade evince-browser-pluginUpgrade evince-nautilusUpgrade okular-partUpgrade okular-debuginfoUpgrade poppler-cpp-develUpgrade poppler-qt-develUpgrade poppler-cppUpgrade popplerUpgrade evince-debuginfoUpgrade poppler-glibUpgrade poppler-qtUpgrade poppler-utilsUpgrade poppler-glib-develUpgrade evinceUpgrade evince-libsUpgrade okular-libsUpgrade okular-develUpgrade poppler-debuginfoUpgrade poppler-demosUpgrade poppler-develUpgrade okular | Aug 28, 2019 | Nov 10, 2018 |
| Debian | — | Upgrade poppler | Jul 30, 2024 | Nov 10, 2018 |
| Gentoo Linux | — | Upgrade app-text/poppler. | Apr 3, 2019 | Nov 10, 2018 |
| Huawei Euleros 2_0_sp2 | — | Upgrade poppler-qtUpgrade poppler-glibUpgrade popplerUpgrade poppler-utils | Dec 4, 2019 | Nov 10, 2018 |
| Huawei Euleros 2_0_sp3 | — | Upgrade poppler-glibUpgrade poppler-utilsUpgrade poppler-qtUpgrade poppler | Nov 19, 2019 | Nov 10, 2018 |
| Huawei Euleros 2_0_sp5 | — | Upgrade poppler-utilsUpgrade poppler-qtUpgrade popplerUpgrade poppler-glib | Nov 19, 2019 | Nov 10, 2018 |
| Oracle_linux | — | Upgrade okular-partUpgrade poppler-qtUpgrade evince-browser-pluginUpgrade poppler-develUpgrade poppler-glibUpgrade poppler-utilsUpgrade okular-develUpgrade evince-develUpgrade evince-dviUpgrade poppler-glib-develUpgrade evince-nautilusUpgrade poppler-cpp-develUpgrade poppler-cppUpgrade popplerUpgrade evince-libsUpgrade evinceUpgrade poppler-demosUpgrade okular-libsUpgrade okularUpgrade poppler-qt-devel | Jul 21, 2020 | Nov 8, 2018 |
| Redhat_linux | — | Upgrade poppler-cppUpgrade evince-develUpgrade evinceUpgrade poppler-glibUpgrade poppler-cpp-develUpgrade poppler-debuginfoUpgrade evince-dviUpgrade popplerUpgrade evince-browser-pluginUpgrade poppler-glib-develUpgrade poppler-utilsUpgrade evince-libsUpgrade okular-libsUpgrade evince-debuginfoUpgrade okular-develUpgrade evince-nautilusUpgrade poppler-qtUpgrade okular-debuginfoUpgrade okularUpgrade okular-partUpgrade poppler-demosUpgrade poppler-qt-develUpgrade poppler-devel | Aug 7, 2019 | Nov 10, 2018 |
| Suse | — | Upgrade typelib-1_0-Poppler-0_18Upgrade libpoppler-develUpgrade libpoppler-cpp0Upgrade libpoppler73Upgrade libpoppler-glib-develUpgrade libpoppler73-32bitUpgrade libpoppler-glib8Upgrade poppler-tools | Dec 2, 2021 | Nov 10, 2018 |
| Ubuntu | — | Upgrade poppler-utilsUpgrade libpoppler58Upgrade libpoppler44 | Dec 12, 2018 | Nov 10, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub